Enable or Disable DHCP Snooping on a VLAN

Use the following procedure to configure DHCP Snooping on a specific VLAN. If DHCP Snooping is globally disabled, the switch forwards DHCP reply packets (received on trusted or untrusted ports) to all ports.

If you enable DHCP Snooping globally, the agent determines whether to forward DHCP reply packets based on the DHCP Snooping mode of the VLAN and trusted state of the port.

Note

Note

You cannot enable DHCP Snooping on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

  1. Enter VLAN Interface Configuration mode:

    enable

    configure terminal

    interface vlan <1–4059>

  2. Enable DHCP Snooping on the VLAN:

    ip dhcp-snooping enable

  3. Disable DHCP Snooping on the VLAN:

    no ip dhcp-snooping enable

Example

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface vlan 5
Switch:1(config-if)#ip dhcp-snooping enable

Variable Definitions

The following table defines parameters for the ip dhcp-snooping command.

Variable

Value

enable

Enables or disables DHCP Snooping on the specified VLAN.